Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
File: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft (raw, json)
Hash identifier: Peuw2QWZ5syOgCEoEzGpFY2SaAJgqFXRk4tOeujA1Ig=
Subject key identifier: 8E:18:43:E4:C1:94:FA:5E:AD:6C:44:CE:A3:3D:7B:27:6C:3C:96:C2
Authority key identifier: EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
Certificate issuer: /CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Certificate serial: 019D27E02FCC2F87157ED3707D8F597792FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
Manifest number: 16C8
Signing time: Thu 26 Mar 2026 02:01:36 +0000
Manifest this update: Thu 26 Mar 2026 02:01:36 +0000
Manifest next update: Fri 27 Mar 2026 02:01:36 +0000
Files and hashes: 1: 6XsZO_TltMpWaIXpEJ9j4Ijt3Wo.roa (hash: AmndDW7NkmhQPmIE+LZ+wdkjraSPxi3//yw9gxzh3WQ=)
2: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl (hash: lC/JnVT82t8kH2W7CNU1vCSsFaO6uUqCPmyNnarD1TY=)
3: qS1FhvHNjTct9kkj2vIxWEw1yv8.roa (hash: WpowF4fjiVOFY59c2MXRRHLypjY6PRS8W4ndaISZRLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:2f:cc:2f:87:15:7e:d3:70:7d:8f:59:77:92:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Validity
Not Before: Mar 26 02:01:36 2026 GMT
Not After : Mar 27 02:01:36 2026 GMT
Subject: CN=8e1843e4c194fa5ead6c44cea33d7b276c3c96c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e8:df:45:8e:53:78:df:f9:4a:8e:dd:ff:86:
e1:57:b0:3a:63:1e:be:1b:39:57:9d:fc:97:52:98:
0d:96:62:64:10:78:08:3d:c1:22:64:61:56:78:c4:
94:fe:7f:94:8e:7f:3e:2f:38:25:b1:32:7c:f3:ae:
09:97:a6:ec:c1:d6:91:84:15:40:5d:78:2d:5c:d2:
39:c8:6c:97:0c:65:e3:cd:d6:e5:20:d5:68:6b:84:
ef:84:35:ac:77:df:83:e3:14:0e:a6:ca:cc:9d:8b:
e3:5e:0f:29:c1:bf:1d:c6:6e:8d:aa:b3:89:5d:fc:
c0:8b:06:fb:96:b7:b5:67:5d:0d:db:ff:50:98:a8:
c1:8f:a5:bf:6d:b0:45:8c:35:4c:99:9b:de:e1:fc:
61:69:42:78:ba:37:0b:1b:23:4d:17:57:66:c4:69:
0e:a8:f0:f9:59:bd:cc:bc:23:c8:3e:db:4a:11:d8:
a7:5c:f5:36:c3:ba:97:e9:3e:cb:06:27:21:51:04:
af:46:01:db:35:63:c4:b2:ea:21:ae:4b:6d:fb:27:
af:e2:d9:c5:6c:fb:91:4c:e6:43:ca:61:56:63:4a:
5a:86:be:c3:63:93:00:6d:5f:80:56:dc:31:b9:36:
66:fd:f9:12:94:a0:bb:bd:66:94:a5:cd:6a:63:b9:
0c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:18:43:E4:C1:94:FA:5E:AD:6C:44:CE:A3:3D:7B:27:6C:3C:96:C2
X509v3 Authority Key Identifier:
keyid:EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f4:71:13:48:6f:52:30:8a:96:8b:27:96:f2:35:2d:b4:4f:
22:40:fe:f8:a4:3b:6a:5a:e7:f6:bb:c1:8c:4d:e1:7c:c5:d6:
3a:db:ae:e7:60:1c:c3:90:82:cc:3d:58:4e:f9:4b:2c:45:9e:
54:73:8d:d2:ae:5e:69:9a:07:6c:1a:d8:7a:94:0a:ca:b5:2b:
a9:e3:12:32:cc:60:55:a7:95:ef:99:8f:b9:6f:d1:7c:30:d6:
42:38:db:71:7f:2a:30:15:97:92:26:19:58:44:b6:bf:16:3a:
3c:3e:8e:d6:d3:9f:dc:2a:95:af:5c:14:50:0d:25:ba:da:5c:
7a:fd:0e:36:33:bd:19:66:ab:02:b5:31:a6:15:ed:2b:ef:01:
45:8d:59:3a:0b:ca:ad:53:7d:96:7e:ea:09:d6:be:c9:12:c6:
ad:81:38:25:14:01:09:ec:9f:9e:6d:d5:7d:c5:6d:48:17:03:
9e:a0:bc:9d:20:b6:a8:51:df:f6:87:63:f5:db:90:1b:4a:fc:
f4:7b:c5:ae:b1:e4:1f:63:80:f2:81:71:f2:a3:8d:65:e8:de:
d2:0a:9a:e5:2a:be:53:0f:b3:f4:1e:1f:66:d8:16:35:62:dc:
d1:c5:37:58:06:12:b2:94:2b:46:3c:98:12:53:16:a7:8f:10:
cf:1b:c7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:16 2026 by rpki-client